main.yml 1.0 KB

12345678910111213141516171819202122232425262728293031
  1. ---
  2. nginx_ssl_protocols: "TLSv1.2 TLSv1.3"
  3. nginx_ssl_ciphers: "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256"
  4. nginx_hsts_max_age: 31536000
  5. nginx_rate_limit_req_zone: "$binary_remote_addr zone=general:10m rate=30r/m"
  6. nginx_client_max_body_size: "10m"
  7. nginx_proxy_read_timeout: 60
  8. nginx_redirect_services:
  9. - name: gogs
  10. server_name: gogs.tftsr.com
  11. - name: homeassist
  12. server_name: homeassist.tftsr.com
  13. - name: kimai
  14. server_name: kimai.tftsr.com
  15. - name: ollama-ui
  16. server_name: ollama-ui.tftsr.com
  17. - name: overseerr
  18. server_name: overseerr.tftsr.com
  19. - name: plex
  20. server_name: plex.tftsr.com
  21. - name: portainer
  22. server_name: portainer.tftsr.com
  23. - name: radarr
  24. server_name: radarr.tftsr.com
  25. - name: retro
  26. server_name: retro.tftsr.com
  27. - name: sonarr
  28. server_name: sonarr.tftsr.com
  29. - name: trilium
  30. server_name: trilium.tftsr.com